Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-4710

EPSS 0.41% · P62
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-4710

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
TYPO3 Reset backend password扩展件SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 TYPO3的Reset backend password (cwt_resetbepassword)扩展件存在SQL注入漏洞。远程攻击者可以借助未明向量，执行任意的SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-4710

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4710

请登录查看更多情报信息。

Same Patch Batch · n/a · 2010-03-15 · 21 CVEs total

CVE-2009-4708TYPO3 [Gobernalia] Front End News Submitter扩展件SQL注入漏洞
CVE-2009-4718Gonafish WebStatCaffe 'visitorduration.php'SQL注入漏洞
CVE-2009-4717Gonafish WebStatCaffe多个跨站脚本攻击漏洞
CVE-2009-4716EDGEPHP EZWebSearch 'results.php'跨站脚本攻击漏洞
CVE-2009-4715PHP Scripts Now Real Time Currency Exchange 'rates.php'跨站脚本攻击漏洞
CVE-2009-4714XOOPS Celepar quiz模块跨站脚本攻击漏洞
CVE-2009-4713XOOPS Celepar Qas模块多个跨站脚本攻击漏洞
CVE-2009-4712Tukanas Classifieds Script 'index.php'SQL注入漏洞
CVE-2009-4711TYPO3 CoolURI扩展件SQL注入漏洞
CVE-2009-4709TYPO3 datamints Newsticker)扩展件SQL注入漏洞
CVE-2009-4698CELEPAR Xoops Celepar 模块多个SQL注入漏洞
CVE-2009-4707TYPO3 [Gobernalia] Front End News Submitter扩展件跨站脚本攻击漏洞
CVE-2009-4706TYPO3 Mailform扩展件跨站脚本攻击漏洞
CVE-2009-4705TYPO3 Twitter Search扩展件跨站脚本攻击漏洞
CVE-2009-4704TYPO3 Webesse E-Card扩展件未明漏洞
CVE-2009-4703TYPO3 Webesse Image Gallery扩展件SQL注入漏洞
CVE-2009-4702TYPO3 Tour Extension扩展件SQL注入漏洞
CVE-2009-4701TYPO3 Myth download扩展件SQL注入漏洞
CVE-2009-4700SkaDate Dating 'index.php'目录遍历漏洞
CVE-2009-4699SkaDate Dating 多个跨站脚本攻击漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4710

No comments yet

Leave a comment